CVE-2011-1263
Windows Server 2008 R2 and R2 SP1 - Cross-Site Scripting via RD Web Access Logon Page URI
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2 and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "Remote Desktop Web Access Vulnerability."
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-061
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12792
US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA11-221A.html
Scores
EPSS
0.1524
EPSS Percentile
96.4%
Details
CWE
CWE-79
Status
published
Products (1)
microsoft/windows_server_2008
r2
Published
Aug 10, 2011
Tracked Since
Feb 18, 2026